v1.6.4 - Fixes CVE-2025-60868

• Fixes CVE-2025-60868 (public, non-coordinated disclosure - @kasiasok) by improving validation and normalisation in the query string stripping logic.

• This resolves cases where certain query parameters could bypass stripping due to casing, encoding, or duplication.

We recommend upgrading to this version when possible to ensure redirects behave safely and consistently.

v1.6.3 - Default Install Changes

Remove default query string installation during install after feedback 🙌

v1.6.2 - Bugfix URL query encoding issue

Bugfix - Fixes a bug with PHP_QUERY_RFC1738 encoded URLs where the processed URI came out PHP_QUERY_RFC3986 encoded, breaking the redirect. Encoding type is now flagged based on the requestURI on the fly to chose the same type as the request.

v1.6.1 - Fix import functionality

@stephencockerill - Import functionality fixed.

v1.6.0 - Enhanced Query String functionality

This release sees enhanced query string functionality. This changes the behaviour of the query strings such that added Query strings are stripped, the URI processed, they are then re-added back to the redirect.

Following this change, a "strip" toggle has been added to enable complete stripping of a query string. If this is toggled on, the string will be removed before the URI is processed, it will not be re-added afterward.

V1.5.2 - Hotfix

Fixed an issue in the URI function for stripping query strings that could cause the URI to not have the base path stripped sometimes.

v1.5.1 - Hotfix

Hotfix missing new asset build

v1.5.0 - Statamic Static Site Generator support

Adds new functionality to support Statamic's Static Site Generator addon.

Thanks to :

@efc - Main block of functionality
@breizhwave - flagging '/' issue on index.html

v1.4.0 - Query String functionality & general fixes / tidy up

Adds new functionality to filter query strings from URIs.

General code tidy up and improved documentation

v1.3.3 - Statamic Version Bump

Statamic Version Bump